Who we are
Premiss is operated by Lora Labs AB (org. nr 559595-2275), Skogsslingan 3, 182 30 Danderyd, Sweden. We are the controller of the personal data described here. To reach us about privacy, email founders@loralabs.co.
What we collect and why
When you create an account we collect your email, and either a hashed password or, if you sign in with Google, your name and profile picture. During onboarding you can tell us your trading experience and what you want to achieve with Premiss. As you use the product we store the strategies you write, your backtests, and the paper simulations you run live. We also keep basic technical data such as your IP address and device type, and any messages you send us.
We may also record how you use the app — the screens you visit and what you click. If you're in the EU, UK, or another region where the law requires consent, this happens only if you opt in when creating your account or later in the app's settings; elsewhere it's on by default. Your code, your messages, and anything you type into forms are masked and never appear in a recording. We use these recordings only to fix bugs and improve the product, and you can turn them off at any time in the app's settings.
We use this data to run the product, keep your account secure, and reply to you. To generate and discuss your strategies, the text you write is processed by an AI provider on our behalf; we don't use your private strategies to train models or show them to other users. Price data shown in the product comes from third-party market-data sources and is not personal data.
If you subscribe, Stripe processes your payment. We receive your name, billing address and any tax ID you enter; your card details stay with Stripe and we never see them.
If you use Premiss inside ChatGPT or Claude, OpenAI or Anthropic handle that conversation under their own privacy policies. We receive only what their assistant sends to Premiss, such as the strategies and tests you ask for.
If you connect signal channels, we store the channel settings you enter, encrypted credentials such as Discord webhook URLs and Telegram chat identifiers, the email address signals go to, and operational records about signals and delivery attempts. We use this information only to deliver, secure, troubleshoot, and show the signals you requested. Signals never require an exchange API key; any trading account and credentials you give directly to another provider remain with that provider. We delete stored destination credentials when you disconnect the destination or close your Premiss account.
If you are approved for Premiss Live and connect an exchange account, we also store the API keys you create for it. They are held encrypted in a vault we operate, used only to place and read orders for the strategy you promoted, and never shared with anyone else or used for any other purpose. We also store the orders, fills, and positions from those runs. You can revoke the keys at your exchange at any time, and we delete them when you disconnect the account or close your Premiss account.
Our legal basis
Under EU data protection law we rely on a basis for each use of your data. We process your account and the strategies, backtests, simulations, signal destinations, and delivery records you create - and, where you have connected an exchange account, the API keys and order records needed to run it - because we need to in order to provide the service you asked for (to perform our contract with you). We process basic technical and usage data on the basis of our legitimate interest in keeping the product secure, working, and improving - balanced against your rights. Where the law requires consent for session recordings (the EU and UK, for example) they run only if you opt in, and you can withdraw at any time in the app's settings; elsewhere we rely on our legitimate interest in improving the product and give you the same setting to turn them off.
Who we share it with
We don't sell your personal data. We share it only with the service providers we use to run Premiss - for hosting, AI, payments, email, error monitoring, and analytics - and only so they can do that job for us. Some are based outside the EU, including the US; where that happens we use the safeguards required by EU law.
Cookies
We use the cookies needed to keep you signed in, plus a small cookie remembering which region you're in, and a privacy-friendly analytics tool that measures usage — linked to your account when you're signed in — without setting any cookies at all. When session recordings are active (you opted in, or you're outside the consent-required regions and haven't turned them off), that tool sets first-party analytics cookies so your visits can be linked together; otherwise the app stays cookie-free beyond sign-in. We don't use advertising cookies or track you across other sites.
How long we keep it
We keep your data while your account is active. Signal destination credentials and exchange API keys are deleted when you disconnect the relevant destination or account, or close your Premiss account. When you delete your account we delete your data, except for anything we're required to keep by law.
Your rights
You can access, correct, export, or delete your data, and object to how we use it. Email founders@loralabs.co and we'll help. You can also complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or your local data protection authority. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. If you're in California, you have similar rights and we don't sell or share your data.
Changes
If we change this policy we'll update the date above and, for anything important, let you know in the product.
Questions about your data? founders@loralabs.co